Blind XSS tips 1. There was No sign-up page. Only sign_in. 2. Changed sign_in to sign_up 3. sign_up page appeared 4. Put bxss payload. 5. Payload executed in the admin panel of the same domain. 6. Got cookie 7. Used cookie to login to admin panel. #bugbounty #bugbountytip
7
39
264
199
12千
Which service/tool do you use for bxss? Or host your own?
2
0
0
0
580
United States 趨勢
- 1. Black Friday 406K posts
- 2. Egg Bowl 5,699 posts
- 3. Mississippi State 3,235 posts
- 4. Emmett Johnson N/A
- 5. Sumrall 1,588 posts
- 6. Scott Stricklin N/A
- 7. Kamario Taylor N/A
- 8. NextNRG Inc 1,801 posts
- 9. #SkylineSweeps N/A
- 10. Black Ops 7 XP 2,892 posts
- 11. Chambliss 1,323 posts
- 12. #Huskers N/A
- 13. Wetjen N/A
- 14. #HMxCODSweepstakes N/A
- 15. #Rashmer 24.7K posts
- 16. Carson Soucy N/A
- 17. Porsha N/A
- 18. Solo Ball N/A
- 19. #FanCashDropPromotion 1,846 posts
- 20. Fisch 1,223 posts
Loading...
Something went wrong.
Something went wrong.